Openemr

Openemr

50 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-67645

Exploit
  • EPSS 0.04%
  • Veröffentlicht 27.01.2026 23:20:18
  • Zuletzt bearbeitet 12.02.2026 20:50:17

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters...

6.5

CVE-2025-54373

Exploit
  • EPSS 0.03%
  • Veröffentlicht 27.01.2026 23:11:57
  • Zuletzt bearbeitet 12.02.2026 20:58:12

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability where sensitive data is unintentionally revealed to unauthorized parties. Contents of Clinical Notes...

8.8

CVE-2013-10044

Exploit
  • EPSS 4.26%
  • Veröffentlicht 01.08.2025 20:46:45
  • Zuletzt bearbeitet 26.11.2025 14:10:49

An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted f...

7.6

CVE-2025-43860

Exploit
  • EPSS 0.33%
  • Veröffentlicht 23.05.2025 15:35:01
  • Zuletzt bearbeitet 02.07.2025 00:36:14

OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS) vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation and editing pr...

5.4

CVE-2025-32967

Exploit
  • EPSS 0.29%
  • Veröffentlicht 23.05.2025 15:31:52
  • Zuletzt bearbeitet 02.07.2025 00:41:37

OpenEMR is a free and open source electronic health records and medical practice management application. A logging oversight in versions prior to 7.0.3.4 allows password change events to go unrecorded on the client-side log viewer, preventing adminis...

7.6

CVE-2025-32794

Exploit
  • EPSS 0.26%
  • Veröffentlicht 23.05.2025 15:15:32
  • Zuletzt bearbeitet 02.07.2025 00:45:22

OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS) vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation privileges to ...

9.8

CVE-2024-22611

Exploit
  • EPSS 0.01%
  • Veröffentlicht 03.04.2025 00:00:00
  • Zuletzt bearbeitet 08.04.2025 20:21:55

OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controller.php.

5.4

CVE-2025-31121

Exploit
  • EPSS 1.04%
  • Veröffentlicht 01.04.2025 15:16:07
  • Zuletzt bearbeitet 07.05.2025 15:35:41

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnera...

7.5

CVE-2025-31117

Exploit
  • EPSS 0.91%
  • Veröffentlicht 31.03.2025 17:15:42
  • Zuletzt bearbeitet 30.04.2025 16:08:43

OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery (OOB SSRF) vulnerability was identified in OpenEMR, allowing an attacker to force the server to make u...

5.4

CVE-2025-30161

Exploit
  • EPSS 0.5%
  • Veröffentlicht 31.03.2025 16:15:25
  • Zuletzt bearbeitet 13.05.2025 13:36:27

OpenEMR is a free and open source electronic health records and medical practice management application. A stored XSS vulnerability in the Bronchitis form component of OpenEMR allows anyone who is able to edit a bronchitis form to steal credentials f...